"Alerted.org

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

The Director of Cyber Governance is a senior leadership role responsible for developing, implementing, and maintaining the organization’s cybersecurity governance, risk management, and compliance programs while balancing the strategic management of cybersecurity initiatives across the enterprise. This role ensures alignment of cybersecurity strategies with business objectives, manages the cybersecurity project portfolio, and drives business engagement through consulting, training, and awareness programs.

What you'll do

_As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations._

+ Act as a key liaison between cybersecurity and business units, ensuring business needs and risks are understood and addressed. Oversee the Business Information Security Officer (BISO) and Technology Information Security Officer (TISO) functions, ensuring effective alignment and communication

+ Lead the planning, prioritization, and execution of the cybersecurity project portfolio

+ Provide guidance on cybersecurity best practices, risk management, and compliance

+ Oversee intake process for business requests, ensuring timely and effective evaluation and response

+ Coordinate and deliver cyber training and awareness programs tailored to business needs and risk

+ Architect and oversee cybersecurity policies, standards, and frameworks

+ Establish and maintain a cyber governance structure, including committees and reporting mechanisms

+ Ensure alignment between cybersecurity initiatives and business objectives

+ Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, SOX, ISO, NIST)

+ Oversee internal and external cybersecurity audits

+ Coordinate responses to regulatory inquiries and assessments

+ Oversee the development and implementation of cybersecurity strategies and roadmaps

+ Manage reporting and metrics for cybersecurity initiatives, ensuring clear communication of progress, risks, and outcomes to executive leadership

+ Establish and maintain processes for intake, evaluation, and prioritization of projects and initiatives

+ Lead the identification, assessment, and prioritization of cybersecurity risks

+ Oversee the development and implementation of risk mitigation strategies

+ Drive and manage the enterprise 3rd party cyber risk management program

+ Monitor and manage the organization’s risk register and ensure regular risk reviews

+ Own and optimize risk management platforms to support governance, risk, and compliance processes

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

+ Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Business Administration, Risk Management, Engineering

+ 10+ years of experience in cybersecurity management, governance, risk management, compliance or a related field

+ Strong understanding of cybersecurity frameworks and regulations, such as NIST and GDPR

Preferred Qualifications- Education & Prior Job Experience

+ Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Business Administration, Risk Management, or a related field; advanced degree

+ 5+ years of experience in a leadership role

+ Proven track record of developing and implementing successful cybersecurity programs

Skills, Licenses & Certifications

+ Relevant certifications such as CISSP, CISM, CISA, CGEIT, or CRISC are highly desirable.

+ Other relevant certifications such as GRCP, PMP or CRMA Certifications are advantageous.

+ In-depth knowledge of cybersecurity frameworks, risk management, regulatory and compliance knowledge, policy development, incident response, program/ portfolio management, metrics and reporting and GRC technical platforms.

+ Strong analytical and problem-solving skills.

+ Excellent leadership and team management abilities.

+ Strong communication and interpersonal skills, to be able to influence and build relationships with stakeholders across levels.

+ Strong presentation skills with the ability to convey complex security information clearly.

What you'll get

Feel free to take advantage of all that American Airlines has to offer:

+ Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.

+ Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more.

+ Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.

+ 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.

+ Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.

EQUAL EMPLOYMENT OPPORTUNITY/ AFFIRMATIVE ACTION POLICY

American Airlines maintains a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity and access for all persons, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a disabled veteran or other protected veteran, in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, the following employment decisions and practices: hiring; upgrading; promotions; demotions or transfers; layoffs; recalls; terminations; rates of pay or other forms of compensation; selection for training, including apprenticeship; and recruitment or recruitment advertising.